Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/GzotJBUOHljVNh0Zk4R9t7GxARM.roa
File:                     GzotJBUOHljVNh0Zk4R9t7GxARM.roa (raw, json)
Hash identifier:          LEmywZc6wpx6BIGpVd4ODF3dKsVXC0SMjgrcw+q1lXM=
Subject key identifier:   1B:3A:2D:24:15:0E:1E:58:D5:36:1D:19:93:84:7D:B7:B1:B1:01:13
Certificate issuer:       /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial:       018F97AFAFDAA20E353E1732E2B0642DAC4E
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/GzotJBUOHljVNh0Zk4R9t7GxARM.roa
Signing time:             Mon 20 May 2024 20:27:04 +0000
ROA not before:           Mon 20 May 2024 20:27:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400866
IP address blocks:        91.227.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 06:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:af:af:da:a2:0e:35:3e:17:32:e2:b0:64:2d:ac:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
        Validity
            Not Before: May 20 20:27:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b3a2d24150e1e58d5361d1993847db7b1b10113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:b2:98:73:31:33:67:dd:26:ac:c4:3f:1b:
                    37:33:e2:44:a7:c0:d6:da:79:1a:64:80:26:77:0a:
                    22:90:ec:d4:93:ad:f3:3e:53:00:81:35:f7:b1:cf:
                    f2:9e:8d:d5:3b:a5:ca:b0:81:06:f5:bb:15:f4:53:
                    41:3a:df:f7:04:a5:15:30:0a:fd:7d:c0:43:8b:b4:
                    d1:f9:6a:bd:99:db:36:da:9a:2d:f9:b1:33:25:36:
                    11:08:6a:42:76:58:f8:2a:36:d8:8f:4f:cf:59:07:
                    33:08:47:fe:62:12:8b:b2:e3:b3:d0:2b:d1:1b:4a:
                    2f:d3:f7:e5:ad:ce:0e:cb:52:84:a7:9a:c4:cb:6d:
                    89:5e:85:e0:d1:ab:9b:f9:a0:3b:15:30:23:b2:c3:
                    fe:aa:b1:c2:fd:f6:90:16:3b:7b:a9:c7:b3:8b:00:
                    c7:7c:57:89:56:92:4f:27:9c:ad:e6:32:1a:26:e0:
                    4c:cc:36:dd:76:e2:d8:06:bd:35:45:d8:59:84:bf:
                    1a:04:76:b6:cc:40:36:64:c4:a5:6c:d1:e7:d6:c2:
                    2c:50:cd:21:51:4a:69:7b:ea:28:39:c3:bc:d3:32:
                    4e:cb:39:0d:39:94:82:c2:88:7c:db:35:2a:a6:36:
                    03:63:80:d1:18:8c:76:d8:da:65:ad:62:e4:f1:df:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:2D:24:15:0E:1E:58:D5:36:1D:19:93:84:7D:B7:B1:B1:01:13
            X509v3 Authority Key Identifier:
                keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/GzotJBUOHljVNh0Zk4R9t7GxARM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:10:d8:22:46:aa:18:96:44:41:b7:f8:e2:91:7c:ac:93:11:
         06:00:fe:10:55:84:e9:8f:64:6b:b8:80:b8:11:f3:04:8c:18:
         2e:8a:4b:9a:24:2f:a0:19:49:3b:00:00:f4:58:f1:5f:f4:ee:
         05:de:56:76:3d:5e:ad:8f:4d:60:b7:50:eb:e8:c5:24:70:37:
         71:98:74:d2:b5:55:a1:11:31:1c:e2:c2:a5:6e:49:33:78:ed:
         07:bb:54:24:e9:68:e5:6f:c7:2a:d9:72:8a:35:a2:55:61:ed:
         b9:5d:0b:d1:3c:3f:c5:39:e9:35:af:90:b1:37:85:5d:20:c5:
         b6:66:d5:20:22:a6:58:d0:81:92:95:75:bc:3b:8d:26:cb:ca:
         41:e9:db:6e:9e:ee:c2:6b:42:93:a7:af:8e:13:29:97:c7:bb:
         3c:4e:70:c2:40:fe:c4:d4:40:f6:0f:cb:c4:5d:96:af:c4:f5:
         86:fd:ea:15:9f:6f:ab:9e:c7:6e:a2:7f:d6:5f:76:d0:09:f4:
         fd:f4:7a:57:8c:32:8a:25:18:d1:4e:3b:df:a4:61:16:f8:92:
         0d:73:3e:50:56:c7:92:61:3a:5a:cb:70:cf:6d:4d:29:66:86:
         c0:b2:2e:0f:ed:95:40:96:ce:9c:d7:0f:c6:e5:c8:11:7d:a0:
         3a:da:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 07:29:04 2024 by rpki-client on console-fra.rpki-client.org